ISO 17024 certification management software

CredFlow is a credential lifecycle management platform built to support certification bodies that operate under ISO/IEC 17024, the international standard for certifying persons. It gives your program the impartiality controls, competence verification, immutable records, and 7-year retention the standard expects - CredFlow helps you meet ISO/IEC 17024, it is not itself an accreditor or a certified body. Built by Electric Software LLC and SOC 2 compliant.

What ISO/IEC 17024 is

ISO/IEC 17024 is the international standard that specifies requirements for bodies operating certification of persons. Where other standards address products or quality systems, 17024 is specifically about how an organization certifies that an individual is competent - and does so impartially, consistently, and defensibly. Programs that conform to it (typically confirmed through accreditation by a recognized accreditation body) gain globally portable credibility for their certification.

The themes the standard emphasizes

At a high level, and without quoting specific clauses, ISO/IEC 17024 keeps returning to three intertwined themes:

  • Impartiality. Certification decisions must be free from conflicts of interest and from pressure related to training, finances, or relationships.
  • Competence. The program must verify, through a sound assessment and clear eligibility, that the certificant is actually competent - and that they remain so through recertification.
  • Records and process control. The body must document its decisions and keep retrievable records, so conformity can be evidenced during surveillance and reassessment.

How CredFlow supports an ISO 17024 program

CredFlow runs the full lifecycle - application → eligibility review → exam → certification → continuing education → renewal - with each stage configurable per credential type and every transition automated and audit-logged.

Impartiality through separation of duties

Role-based access tiers and multi-org isolation (with Postgres row-level security) let you keep application review, certification decisions, and program administration in separate hands. Because every decision is recorded with its actor, you can demonstrate that certifications were granted impartially and by the appropriate role.

Verifying competence - initial and ongoing

An eligibility rules engine enforces your prerequisites before a candidate sits the exam, and configurable recertification cycles - with continuing-education tracking, randomized audit selection, and anomaly detection - let you show that certificants remain competent over time, not just that they renewed.

Records, retention, and evidence

Every lifecycle transition is written to an append-only audit log capturing actor, timestamp, and before/after state, retained for 7 years. Excel and PDF exports make it straightforward to assemble evidence packets for an assessor. CredFlow is SOC 2 compliant, which speaks to the information-security controls around those records.

A public, verifiable certification register

A branded public verification portal at verify.yourdomain.com, downloadable certificates, and shareable digital badges with permanent verification URLs let third parties confirm the validity of a certification - supporting the transparency that personnel-certification schemes are expected to provide.

An honest note on the word “certified”

CredFlow is software and cannot be “ISO 17024 certified” - only a certification body can be accredited to the standard. CredFlow's role is to give that body the operational system and evidence trail to conform with far less manual effort. The same platform is engineered around NCCA and AMC Institute requirements as well.

Moving onto CredFlow

Implementations typically run 8-16 weeks with a dedicated implementation manager, and data migration from spreadsheets, custom portals, Salesforce-based setups, and legacy platforms is included. To talk through fit and pricing, book a demo or email manage@electric.software.

Book a 30-min demo →